Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/23a19fbb-d88c-46e1-9b64-f6d20bbd7cdc.cer
File:                     23a19fbb-d88c-46e1-9b64-f6d20bbd7cdc.cer (raw, json)
Hash identifier:          GopyXHUufCfYWi9Ul7s5IlkBMaDRa9fBcy9vnbuLX6Q=
Subject key identifier:   B4:92:23:AA:2F:2C:ED:BD:C2:2C:F9:46:78:86:EA:B0:62:57:0A:4F
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer:       /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial:       010D0C9F432858482CD19F8FDAB277D883F73F00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/23a19fbb-d88c-46e1-9b64-f6d20bbd7cdc/23a19fbb-d88c-46e1-9b64-f6d20bbd7cdc.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/23a19fbb-d88c-46e1-9b64-f6d20bbd7cdc/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 11 Dec 2024 21:24:49 +0000
Certificate not after:    Tue 16 Mar 2027 20:24:49 +0000
Subordinate resources:    AS: 35938
                          IP: 162.248.120.0/21
                          IP: 204.77.206.0/24

Validation:               Failed, certificate revoked on Thu 12 Dec 2024 18:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2c:d1:9f:8f:da:b2:77:d8:83:f7:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
        Validity
            Not Before: Dec 11 21:24:49 2024 GMT
            Not After : Mar 16 20:24:49 2027 GMT
        Subject: CN=23a19fbb-d88c-46e1-9b64-f6d20bbd7cdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:3d:d8:b1:19:16:d3:1f:bc:1a:49:1e:cc:fa:
                    5f:84:9a:b2:cb:12:63:03:cc:09:ec:9d:75:b3:da:
                    14:50:2b:07:46:7c:74:fa:5f:d0:c5:b2:f4:6a:d8:
                    60:83:2e:5e:71:11:21:06:6a:e8:65:df:ed:dc:7d:
                    97:40:93:8c:7e:14:a3:c2:00:53:08:80:45:16:34:
                    f1:ee:f7:4b:a3:94:b5:a0:74:31:e0:fe:0e:3a:c3:
                    36:b4:8a:af:92:fc:fb:81:5c:de:bc:c7:51:10:8e:
                    c8:97:39:ac:0f:4d:4f:3a:7d:0c:fb:87:c1:33:c8:
                    1a:fc:7f:e5:e7:a2:b7:c0:e5:1b:31:1a:ba:3d:52:
                    a0:53:81:73:c0:e1:81:5d:e9:d5:19:ca:82:4f:8b:
                    2c:6d:14:0e:17:62:b4:34:0e:11:74:6b:34:6c:5e:
                    75:b1:d2:96:de:06:78:42:f0:f5:e5:f5:4c:6c:62:
                    97:17:ab:41:4e:f9:41:6b:43:ce:6e:1e:19:a0:5f:
                    5a:c2:70:3b:3d:80:c3:da:7e:da:d1:9b:c3:9d:80:
                    7d:d4:94:4b:1e:9d:16:46:b9:d2:23:80:0c:77:73:
                    53:30:3e:94:9f:c7:9e:ac:31:a9:07:95:0f:f4:2d:
                    19:5e:67:5e:38:22:76:eb:34:a7:b5:3e:7a:33:43:
                    f9:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:92:23:AA:2F:2C:ED:BD:C2:2C:F9:46:78:86:EA:B0:62:57:0A:4F
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/23a19fbb-d88c-46e1-9b64-f6d20bbd7cdc/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/23a19fbb-d88c-46e1-9b64-f6d20bbd7cdc/23a19fbb-d88c-46e1-9b64-f6d20bbd7cdc.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl

            X509v3 Authority Key Identifier:
                keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.248.120.0/21
                  204.77.206.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  35938

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:a0:f5:47:e3:15:42:c8:04:8e:2d:fc:a3:6c:a2:44:89:45:
         f8:2e:cb:7d:5f:12:37:e2:01:24:48:5f:b8:1a:32:91:04:7c:
         7e:07:e9:e3:f6:80:2b:93:10:30:2d:99:66:30:eb:f1:3f:0a:
         fa:fc:99:b2:6a:83:94:2b:4a:03:de:18:e6:df:a8:fc:7d:f9:
         2d:5d:33:b4:49:2a:f9:39:e9:6f:29:36:8c:2a:35:1a:05:d0:
         bc:35:80:2c:7e:5a:44:b5:0b:66:f9:f3:1b:bf:46:43:61:05:
         59:31:87:3b:9f:8a:9a:76:06:af:36:4b:30:66:55:d5:0b:ba:
         72:fa:ae:f2:ed:7b:73:70:53:b9:a5:cc:ff:46:0c:c3:44:0d:
         c1:2d:05:c3:87:3a:d2:2f:8b:eb:64:fd:b9:82:f6:ec:85:68:
         71:71:84:96:e9:a4:3c:df:d7:e3:ce:fb:1e:8a:56:d9:20:32:
         21:9b:21:0b:e8:81:95:9d:72:fc:bd:62:fc:9b:42:fd:7a:18:
         7d:15:85:c6:41:97:80:b6:dc:28:ce:bf:21:f5:02:1b:0e:42:
         96:ee:a9:f0:a5:5c:fc:a9:42:5c:52:f6:ff:71:d5:64:11:fa:
         81:9e:b7:8f:ad:40:3c:26:66:81:7d:91:59:3f:b9:16:45:23:
         50:5b:f9:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 12 22:59:01 2024 by rpki-client on console-ams.rpki-client.org